image credit: Vecteezy

New Android Malware Uses VNC to Spy and Steal Passwords from Victims

A previously undocumented Android-based remote access trojan (RAT) has been found to use screen recording features to steal sensitive information on the device, including banking credentials, and open the door for on-device fraud.

Dubbed “Vultur” due to its use of Virtual Network Computing (VNC)’s remote screen-sharing technology to gain full visibility on targeted users, the mobile malware was distributed via the official Google Play Store and masqueraded as an app named “Protection Guard,” attracting over 5000 installations. Banking and crypto-wallet apps from entities located in Italy, Australia, and Spain were the primary targets.

Read More on The Hacker News